J2EE Security - theme files not authorised

[chrishj]

I when abling J2EE security non primefaces pages load but primefaces pages do not load as the theme packages /css files are not authorised.

I am using Glassfish v3.1

In the web.XML I secure the directory: /secure/*

Could you let me know if anyone has come across this issue?

Thank you.

Chris

[tcnguyen]

I have the same problem with my login site. After success login, everything is fine. I use Spring Webflow and Spring Security

[cagatay.civici]

Enable access to /javax.faces.resource/

[chrishj]

Thank you so much for your speedy reply. This worked treat.

<security-constraint>
<web-resource-collection>
<web-resource-name>All Access</web-resource-name>
<url-pattern>/javax.faces.resource/*</url-pattern>
<http-method>DELETE</http-method>
<http-method>PUT</http-method>
<http-method>HEAD</http-method>
<http-method>OPTIONS</http-method>
<http-method>TRACE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>

Regards,

Chris

[cagatay.civici]

Glad it works!